baidu-map-ios-sdk
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONPRIVILEGE_ESCALATION
Full Analysis
- [COMMAND_EXECUTION]: The skill directs the agent to execute shell commands for dependency management using
pod installand for project verification usingxcodebuild. This is used to ensure the SDK is correctly integrated and the project compiles successfully. - [EXTERNAL_DOWNLOADS]: The skill references and downloads external resources from official and well-known sources. It utilizes CocoaPods for library management and points to Baidu's official LBS domain
lbsyun.baidu.comfor SDK documentation and API keys. It also referencesgems.ruby-china.comfor tool installation. - [INDIRECT_PROMPT_INJECTION]: The skill implements an automated code-fixing loop that introduces a vulnerability surface.
- Ingestion points: The agent is instructed to read and interpret stdout/stderr outputs from
xcodebuildexecution (described inSKILL.md). - Boundary markers: There are no specific delimiters or instructions to ignore malicious content embedded within build logs or third-party error messages.
- Capability inventory: The agent has permissions to execute shell commands (
xcodebuild,pod), modify project source code, and update configuration files likeInfo.plist. - Sanitization: No sanitization logic is provided to filter untrusted content from build outputs before it is used to inform code modification decisions.
- [PRIVILEGE_ESCALATION]: The
references/cocoapods.mdfile contains instructions for the user to perform environment setup usingsudo gem install, which is a standard but sensitive operation for installing system-level software.
Audit Metadata